skills.rest
mashharuki
mashharukiCOMMUNITY
Explore all skills by this author →
Website𝕏@haruki_web3GitHub

aws-iam

Review IAM policy evaluation, trust relationships, and STS session edge cases.

2|Updated May 15, 2026
Search Tags:#devops#security#sts#aws-iam#iam-policy
One-click install
npx skills add https://github.com/mashharuki/floci-sample --skill aws-iam-mashharuki
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-iam
Source: https://github.com/mashharuki/floci-sample/tree/main/.agents/skills/aws-iam
Command: npx skills add https://github.com/mashharuki/floci-sample --skill aws-iam-mashharuki

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps developers, security engineers, and DevOps professionals avoid common IAM pitfalls and understand complex IAM behaviors.

Core Features & Use Cases

  • Policy Evaluation Edge Cases: Provides verified corrections for policy evaluation edge cases.
  • Trust Policy Gotchas: Offers insights into trust policy issues.
  • STS Session Limits: Explains STS session limits and Organizations quirks.
  • SAML/MFA Specifics: Delivers specifics on SAML and MFA configurations.
  • Use Case: For a developer setting up IAM roles and policies, this Skill can prevent common mistakes and improve security posture.

Quick Start

Use the aws-iam skill to review the best practices for IAM policy evaluation and trust relationships.

Frequently Asked Questions about aws-iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does IAM policy evaluation handle conflicting permissions in edge cases?▼

IAM policy evaluation resolves conflicting permissions by applying explicit deny rules first, followed by allow statements. This Skill clarifies complex evaluation edge cases to prevent unexpected access behaviors.

What are common IAM trust policy gotchas when setting up cross-account roles?▼

Common IAM trust policy gotchas include misconfigured principal elements and missing external ID conditions. This Skill identifies trust relationship issues to ensure secure cross-account role assumption.

Why do STS sessions fail due to session limits and AWS Organizations quirks?▼

STS sessions fail when exceeding maximum session duration limits or hitting Organizations service control policy restrictions. This Skill explains STS limits and organizational boundary behaviors.

How do I properly configure SAML and MFA conditions in IAM policies?▼

Configure SAML and MFA conditions by using specific condition keys like saml:sub and aws:MultiFactorAuthPresent. This Skill provides specifics on SAML federation and MFA enforcement rules.

Do I need to understand IAM policy structures before reviewing IAM best practices?▼

Yes, you need prerequisite knowledge of IAM concepts and policy structures. This Skill targets developers and security engineers by addressing complex behaviors rather than teaching basic syntax.

Related Skills

Explore More Software Engineering Skills→
AndreKuraitAndreKurait

aws-iam

Identify and correct IAM misconfigurations in AWS policies and role trust relationships.

Community
Advanced
Renzo-TognellaRenzo-Tognella

securing-aws-iam-permissions

Automate AWS IAM hardening with least privilege, MFA, and credential rotation.

Community
Advanced
necatiarslannecatiarslan
3

awsflow-sts

Run AWS STS commands for identity verification and temporary credential retrieval.

Community
Intermediate
balsm-healthbalsm-health
2

implementing-aws-iam-permission-boundaries

Configure AWS IAM permission boundaries to enforce least privilege on roles and policies using CLI/boto3 workflows.

Official
Advanced